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1 Introduction 

Recall that a field is a commutative ring with unity, where 0^1, and where every 
non-zero element has a multiplicative inverse. Thus we have the operations of +, 
— , x, -r, together with constants 0, 1, and these operations and constants satisfy 
the familiar rules of arithmetic we all grew up with. The most familiar examples 
of fields are Q, R, and C, but there are many other examples. In particular 
it turns out that there are finite fields. You should certainly be familiar with 
the field Z p , but in fact (as we will see) there are fields of order p n for every 
prime-power. In this course we are mainly concerned with field extensions, and 
finding roots of polynomials, but before we get on to this we need to investigate 
the notion of characteristic. 

2 The prime subfield 

Let F be a field, and consider the additive subgroup generated by 1. As usual 
we define 2 = 1 + 1, 3 = 2 + 1, and so on. And, as usual, we let —2 be the 
additive inverse of 2, and so on. So the additive subgroup generated by 1 is 
{0, ±1, ±2, . . .}. But beware! If F = Q, R, or C then this subgroup is just Z. 
But if F = Z 3 (for example) then 1 + 1 + 1 = 0, so that 3 = 0, 4 = 1, -1 = 2 
and so on. So in this case the subgroup is {0, 1, 2}, and 2 is not the integer 2 at 
all. In this case is the set of all integers which are multiples of 3, 1 is the set of 
all integers which are equivalent to 1 mod 3, and 2 is the set of all integers which 
are equivalent to 2 mod 3. Of course this sounds like nonsense, and so to avoid 
confusion and nonsense we sometimes denote the zero element of Z 3 by 0, the 
unit element by 1, and let 2 = 1 + 1. However the standard (quite legitimate) 
convention is to denote the zero element of a field by 0, and denote the unit 
element of a field by 1, even if these are not the integers and 1. 

But for the moment we need to be careful. So (just for the moment) let the 
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zero element of F be 0, let the unit element be 1, let 

n = T + T+...+T 

V v ' 

n 

for n > 0, and let 

n = (-T) + (-T) + . . . + (-T) 

V v ' 

— n 

for n < 0. (Here —1 is the additive inverse of 1 in F.) Then it is easy to see that 
n H — n = 0, so that — n = —n, the additive inverse of n. Also, if m, n > then 

m + n = T + T+ ...+T + T + T+ ...+T = T + T+ ... + T = m + n. 

V v ' V v ' V v ' 

m n m+n 

The proofs that m + n = m + n when one or other or both of m and n are 
negative are similar. Next, let m,n > and consider fn.n. 



m.n = 




= mn 



since 1=1. A gain, it is straightforward to show that m.n = mn for all m,n 
(whatever their signs). (Though you have to prove that (— l) 2 = 1, which I leave 
as an exercise.) 

All this shows that the map / from Z to {0, ±1, ±2, . . .} mapping n to n is a 
ring homomorphism. 

Now one of two things can happen: {0, ±1, ±2, . . .} is either finite or infinite. 
Equivalently, the additive order of 1 is either finite or infinite. 

Lemma 1 If 1 has finite order n then n is prime and {0, ±1, ±2, . . .} = Z n; and 
if 1 has infinite order then {0, ±1, ±2, ...}== Z. 

PROOF: Suppose that 1 has finite order n, and suppose that n = rs (with 
r,s > 0). Then 

f.s = rs = n = 

and so since F is a field either r = or s = 0. But if f = then the order of 1 
divides r, so that n divides r. But this can only happen when r = n and s — 1. 
Similarly, if s = then r = 1 and s — n. So n is prime. 

Now consider the homomorphism / : Z — > {0, ±1, ±2, . . .} mapping m to m. 
The integer m lies in the kernel of / if and only if n divides m. So ker / = nZ, 
and {0, ±1, ±2, . . .} = Imf = Z/ ker / = Z n . 

On the other hand, suppose that 1 has infinite order. Then the elements 
0, ±1, ±2, . . . must all be distinct, for if f = s for some r > s then 

r — s = f — s = 
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and 1 has finite order dividing r — s. So if 1 has infinite order then the homo- 
morphism / is 1-1, and {0, ±T, ±2, . . .} = Z. □ 



Note that in the case when 1 has finite order p (p prime) then the additive 
subgroup generated by 1 is isomorphic to the field Z p . So {0, ±1, ±2, . . .} is a 
field. 

When 1 has infinite order then {0, ±1, ±2, . . .} = Z, which is not a field. But 
if we form the set 

K = {f.s- 1 | r, s G Z, s ^ 0} 

then it is easy to see that K is a subfield of F. Furthermore it is easy to see that 
the map g : Q — > K given by g{r/s) = f.ZP 1 is an isomorphism. 

So every field F has a subfield isomorphic to Q, or a subfield isomorphic to Z p 
for some prime p. This subfield is known as the prime subfield, and is the unique 
minimal subfield of F. In the former case we say that F has characteristic zero, 
and in the latter case we say that F has characteristic p. Note that if F has 
characteristic p, and if a G F then 



a + a + . . . + a = a 1 + 1 + .. . + 1 = a.O = 

V v ' I V v 

v \ v 

so every element has additive order p. And if F has characteristic zero then every 
element has infinite order (additively), since if a G F has finite order n then 



= q + a + . .. + q = a | .1 + 1 + . . . + I | = a.n 

n 

which implies that a = or n = 0. 

From now on we will return to the standard notation of 0,1 for the zero 
element and unit of F. 



3 The Tower Lemma 

Perhaps the most important tool of all for understanding field extensions is the 
notion of the degree of an extension. Let F and K be fields, and suppose that 
F < K. We say that K is a field extension of F, which is just another way of 
saying that F is a subfield of the field K. We can thing of K as a vector space 
over the field F. For K is an abelian group under the field operations +, — , 0, 
and if v e K and a G F then av G K is defined by multiplication in K. In other 
words we "forget" that we actually know how to multiply elements of K, but we 
"remember" that we do know how to multiply elements of K by "scalars" from 



3 



F. The degree of K over F, \K : F\, is defined to be the dimension of K when 
thought of as a vector space over F. For example, |C : R\ = 2. The field C has a 
basis l,i over R, and every element of C can be uniquely expressed in the form 
a.l + f3i for two "scalars" a,/3 G I. On the other hand |R : Q| is infinite. We 
say that K is a finite extension of F ii \K : F\ is finite. 

Lemma 2 (The Tower Lemma) Let F < K < L, and let \K : F\ — m, 

\L : K\ — n. Then \L : F\ — mn. 

Proof: Let a±, ai, . . . , a m be a basis for K as a vector space over F, and let 
61, b 2 , • • • , b n be a basis for L as a vector space over F. We establish the lemma 
by proving that {afij | 1 < i < m, 1 < j < n} is a basis for L as a vector space 
over F. 

First we show that {ctibj} spans L over F. So let b & L. Then 6 = Y^=i kjbj 
for some fcj G X. And for each j we have fcj = Y^iLi fij a i f° r some G F. So 

And now we show that {ai&j} is linearly independent. Suppose that . fij^bj = 
0. Then 

n / m \ 

6 J = - 

J'=l \i=l / 

Now for each j, Y1T=\ fij a i e and 61, b 2 , ■ ■ ■ ,b n are linearly independent over 
K . So /i? a i = f° r all j = 1,2, ... ,n. But a\, a%, . . . ,a m are linearly in- 
dependent over F, and so Y^iL\ fij a i = implies that f\j = for all i. Hence 
fij = for all and we are done. □ 



4 Simple extensions 

Let K be a field extension of the field F, and let a E K. We let F(a) be the 
smallest subfield of K which contains both F and a. We say that F(a) is a simple 
extension of F. Understanding simple extensions is the key to understanding the 
"Introduction to Fields" syllabus. 

Subfields are closed under multiplication, and so since F(a) contains a, F(a) 
also contains a 2 , a 3 ,.... Also F(a) contains 1 (since it is a subfield), and so 
1, a, a 2 , . . . G F(a). Closing this set under addition and under multiplication by 
elements of F we see that 

a + a±a + a 2 a 2 + . . . + a fc a fc G F(a) 

for all a ,ai, . . . ,ak G F and all k > 0. In other words f(a) G F(a) for all 
polynomials 

«o + ctix + + . . . + akX k G F[x}. 
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The set {/(a) | f(x) G F[x]} is denoted F[a]. So F[a] is the set of all polynomials 
in a with coefficients from F, and F[a] is contained in the subfield F(a). The 
situation we are interested in is when F[a] is closed under division, so that F[a] 
is a field and F[a] = F(a). But in general F[a] is not closed under division and 

F(a) = {/(a).^(a)- 1 1 f(x),g(x) G F[x], g(a) ^ 0}. 

(Clearly the set {/(a). i g(a) _1 } above is closed under +, — , x, and contains 0,1 
and so it is a subfield of K. Equally clearly any subfield of K containing both F 
and a must contain all the elements f(a).g(a)~ 1 .) 

Definition 3 We say that a is algebraic over F if /(a) = for some non-zero 
polynomial f(x) G F[x]. If a is not algebraic over F then we say that a is 
transcendental over F. 

We will show that F[a] is a subfield of K (so that F(a) = F[a\) if and only if 
a is algebraic over F. 

Lemma 4 The element a is algebraic over F if and only ifl, a, a 2 , . . . are linearly 
dependent over F. 

PROOF: Note that we say that an infinite set is linearly independent if ev- 
ery finite subset is linearly independent. Conversely, an infinite set is linearly 
dependent if some finite subset is linearly dependent. 

Suppose that a is algebraic over F . Then f(a) = for some non-zero polyno- 
mial f(x) G F[x] and so 

a + ct\a + a 2 a 2 + . . . + a fe a fe = 

for some aio, &i, ■ ■ ■ ,&k G F, not all of which are zero. So 1, a, a 2 , ... , a k are 
linearly dependent. 

On the other hand suppose that 1, a, a 2 , . . . , a k are linearly dependent. Then 
«o + a.\a + «2a 2 + . . . + ctkeP = 

for some ctj which are not all zero. Let f(x) = a + otix + a 2 x 2 + . . . + a^x k . 
Then f(a) =0 and so a is algebraic over F. □ 



Definition 5 If a is algebraic over F then the minimal polynomial of a is the 
monic polynomial m(x) of least degree such that m(a) = 0. 

Lemma 6 If a is algebraic over F then 

1. the minimal polynomial m{x) of a is unique, 
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2. f(a) = if and only if m(x)\f(x) , 

3. m{x) is irreducible. 

PROOF: We prove (2) first. Clearly, if m(x)\f(x) then f(a) = 0. Conversely 
suppose that f(a) = 0. By the division algorithm for polynomials over a field, 
there are polynomials q(x),r(x) with degr < degm such that f(x) = m(x)q(x) + 
r(x). Thus 

= f(a) = m(a)q(a) + r(a) = r(a). 

By the choice of m(x) this implies that r(x) = 0, and so m(x)\f(x). 

(2) implies (1) since if m,i(x) and m 2 (:r) are two minimal polynomials then 
mi|m 2 and m-2\m\. Since they are both monic this implies that m\ = m 2 . 

To establish (3) let m(x) = r(x)s(x) where degr, degs < degm. Then 
r(a)s(a) = m(a) = and so either r(a) = or s(a) = 0. But this is impos- 
sible by the definition of m(x). So m(x) is irreducible. □ 

Theorem 7 If F and K are fields with F < K and if a e K is algebraic over F 
with minimal polynomial m(x) of degree n then 

1. F{a) = F[a] = F[x]/I where I = m{x)F[x\, 

2. \F[a] : F\ — n, and F[a] has basis l,a,a 2 , . . . ,a n_1 as a vector space over 
F. 

PROOF: As we observed above, F[a] is a commutative ring with unity con- 
taining F and a. To show that F[a] is a field we have to show that it is closed 
under division. So let f(x) e F[x] and suppose that f(a) ^ 0. Then m{x) \ f{x) 
and so (since m(x) is irreducible) gcd(m(x), f(x)) = 1. So there are polynomials 
r(x), s(x) such that m(x)r(x) + f(x)s(x) = 1. This gives 

1 = m (a)r(a) + f(a)s(a) = f(a)r(a) 

and so /(a) -1 = r(a) G F[a\. So F[a] is a field. 

We define a map n : F[x] — > F[a] by setting n(f(x)) = f(a). Clearly n is 
homomorphism and ker7r = m(x)F[x] = 1. So 

F[a] = ImTr = F[x}/kenr = F[x]/L 

(Note that since m(x) is irreducible, J is a maximal ideal of F[x\ which implies 
that F[x]/I is a field. Since F[a] = F[x]/I this gives an alternative proof of the 
fact that F[a] is a field.) 

Since the minimal polynomial of a has degree n, it follows that 1, a, a 2 , ... , a n ~ l 
are linearly independent. We show that they span F[a], and to do this we 
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need to show that a k G Sp{l x ) for all k > 0. Clearly a G 

a, a 2 , ... , a™ -1 ) for fc = 0, 1, . . . , n — 1. And if we let 

m(x) = ao + oiix + . . . + a n -\x n ~ l + x n 

then 

a n = — «o — «i a — ••• — «„_ia" _1 G a, a 2 , ... , a™ -1 ). 

Suppose by induction that a fc G Sp(l, a, a 2 , . . . , a n_1 ) for < fc < m for some 
m > n. So 

a m = p + Pia + . . . + Pn-ia 11 - 1 

for some Then 

a m+l = ^ a + + _ _ _ + fi n _ l(1 n g 0; a 2 ; . . . ; a™" 1 ) 

since a, a 2 , ... , a n all lie in Sp(l, a, a 2 , ... , a n_1 ). So F[a] = Sp{l, a, a 2 , ... , a n_1 ). 
Hence 1, a, a 2 , ... , a™ -1 is a basis for F[a] over F, and \F(a) : F\ — n — degm. 

□ 



Example 8 The element 2 1 / 3 satisfies the polynomial x 3 — 2 , which is irreducible 
over Q by Eisenstein's criterion. So X s — 2 is £/ie minimal polynomial o/2 1//3 over 
Q. It follows that Q12 1 / 3 ] zs a field with basis 1, 2 1 / 3 , 2 2 / 3 over Q. 

Example 9 TTie element uj = e 2m ^ 3 is a complex cube root of unity, and so sat- 
isfies the polynomial x 3 — 1 . But x 3 — 1 = (x — 1) (x 2 + x + 1 ) , and so the minimal 
polynomial of uj over Q is x 2 + x + 1. So Q[uj] is a field with basis 1,uj over Q. 

Theorem 10 If F and K are fields with F < K and if a G K is transcendental 
over F then 

1. F(a) - F(x) = {f(x)/g(x) \ f(x),g(x) G F[x], g(x) + 0} ; 

2. \F(a) : F\ = oo. 

PROOF: Since a is transcendental over F the elements 1, a, a 2 , . . . are linearly 
independent over F and F(a) cannot be finite dimensional over F. So \F(a) : 
F| = oo. As we showed above 

F(a) = {/(a).^(a)- 1 1 f(x),g(x) G F[x], g(a) ? 0}. 

We establish (1) by showing that f(a). (7(a) -1 = r(a).s(a) _1 if and only if f(x)/g(x) = 
r(x)/s(x). 
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So suppose that f(a).g(a)~ l = r(a).s(a)^ 1 . Multiplying both sides of this 
equation by g(a)s(a) we obtain f(a).s(a) = r(a).g(a). So a satisfies the polyno- 
mial f(x)s(x) — r(x)g(x). Since a is transcendental this implies that f(x)s(x) — 
r{x)g{x) = and hence that f(x)/g(x) = r(x)/s(x). 

Clearly if f(x)/g(x) = r(x)/s(x) then f^.g^a)^ 1 = r(a).s(a)^ 1 , and so the 
correspondence 

f(n).gin) 1 <-> f(x)/g(x) 
gives an isomorphism between F(a) and F(x). □ 

Note that in some sense this means that all transcendental elements look alike! 
The real numbers e and ir are transcendental over Q. There is a proof in Chapter 
5 of Herstein, though it is not all that easy. 

Note also that the two theorems above give another characterization of the 
property of being algebraic. 

Theorem 11 Let F and K be fields, and let F < K. If a E K then a is algebraic 
over F if and only if F(a) is a finite extension of F. 

PROOF: As we showed above, if a is algebraic then \F(a) : F\ is finite. But 
conversely, if \F(a) : F\ — n then 1, a, a 2 , ... , a n are n + 1 elements (vectors) in 
an n-dimensional space, and so they must be linearly dependent. So a satisfies a 
non-zero polynomial of degree at most n, and a is algebraic. □ 



Lemma 12 If a, b are both algebraic over F (with b ^ 0), then so are a±b, ab, 
a.b- 1 . 

PROOF: Let the minimal polynomials of a and b have degrees m and n respec- 
tively. Then \F(a) : F\=m. Consider the field (F(a))(b) = F(a, b). The element 
b satisfies a polynomial of degree n with coefficients in F . These coefficients lie 
in F(a) and so b is algebraic over F(a). Furthermore the minimal polynomial of 
b over F(a) has degree at most n. (The degree can be less than n. For example 
we could have b G F(a) so that b satisfies the polynomial x — b over F(a).) So 
\F(a, b) : F(a)\ < n and by the Tower Lemma 

\F(a,b) : F| = \F(a,b) : F{a)\ ■ \F{a) : F| < mn. 

Now consider a + b. Clearly a + b G F(a,b) and so F < F(a + b) < F(a,b). 
This implies that \F(a + b) : F\ < mn, and hence that a + b is algebraic over 
F. Similarly a — b, ab, and a.b^ 1 G F(a, b) and so they also are algebraic over F. □ 
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Definition 13 Let F and K be fields, and let F < K . We say that K is an 
algebraic extension of F if every element of K is algebraic over F . 

Note that K can be an infinite extension of F and still be algebraic over F. 
Consider the subset A of the complex numbers consisting of all elements a G C 
such that a is algebraic over Q. Then the lemma above implies that A is a subfield 
of C, and clearly A is algebraic over Q. But A contains roots of the irreducible 
polynomial x n — 2 for all n > 2 (for example). If a is one of these roots then the 
minimal polynomial of a is x n — 2 so that 

Q < F(a) < A 
where \F(a) : Q| = n. Thus \A : Q| > n for all n > 2. 

Theorem 14 // F, K, L are fields, and if K is an algebraic extension of F , and 
L is an algebraic extension of K , then L is an algebraic extension of F. 

PROOF: Let a G L. Then a is algebraic over K and so f(a) = for some 
non-zero polynomial 

k + hx + ... + k n x n G K[x}. 

For each i = 0,1, ... ,n the coefficient ki is algebraic over F and so satisfies a 
polynomial Pi(x) G F[x}. Let degpi = rrii. Consider the field F{k , k±, . . . , k n ). 
We have \F{ko) : F\ < itiq. And since k\ satisfies a polynomial of degree m x with 
coefficients in F we have \F(ko, k±) : F(ko)\ < mi. The Tower Lemma then gives 
\F(ko, ki) : F| < m mi. Continuing in this way we see that \F(ko, hi, ... , k n ) : 
F| < m mi . . . m n . And since a satisfies a polynomial of degree n over F(ko, hi, ... , k n ) 
we have 

\F(k , h,..., k n , a) : F\ < m mi . . . m n n. 
This implies that \F(a) : F| < m m! . . . m n n, so that a is algebraic over F. □ 



5 Roots of polynomials 

The theorem above showing that if a is algebraic over F with minimal polynomial 
m(x) then F(a) = F[x]/I where / is the ideal m(x)F[x] can be stood on its head 
to construct new fields with our bare hands. 

Let F be a field, and let m(x) be an irreducible polynomial in F[x]. Consider 
the ideal / = m(x)F[x]. This is a maximal ideal of F[x], which is a commutative 
ring with unity. So F[x]/I is a field. (To see that / is maximal recall that F[x] 
is a principal ideal domain, so that if / < J < F[x] then J = p(x)F[x] for some 
polynomial p(x). Since m(x) G / < J we have p(x)\m(x). But m(x) is irreducible 
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and so either p(x) is a constant polynomial and J = F[x], or p(x) is a constant 
multiple of m(x) and J — I.) 

The elements of F[x\/I are of the form /(x) + /, with /(x) G F[x]. We can 
write /(x) = m(x)q(x) + r(x) for some q(x), r(x), where degr < degm. Since 
f(x) — r(x) G / we see that f(x) + I = r(x) + I. So if degm = n then every 
element of F[x]/I can be expressed in the form 

ao + ol\x + . . . + a n -\x n ~ 1 + I. 

We identify F with the subfield of F[x]/I consisting of elements a+I (a G F). So 
F[x]/I is an extension field of F and F[x]/I is spanned over F by the elements 
1 + /, x + /, x 2 + /,..., x n_1 + J. Furthermore these n spanning elements are 
linearly independent over F for if a , oti, . . . , « n _i G F then 

a (l + J) + «i(x + /) + ...+ ai n _i(x n_1 + J) = a + «ix + . . . + a n _ix n_1 + I 

and if this equals zero then a + ol\X + . . . + a n -\X n ~ x G /, which can only arise 
when olq — ol\... — a„_i = 0. Hence F[x]/I has the elements 1 + /, x + /, x 2 + 
x™" 1 + / as a basis over F. 
So : F\=n. If we let a = x + I G then a 2 = (x + I){x + I) = 

x 2 + /, a 3 = x 3 + /, and so on. As above we identify 1 + I with 1 G F, so that 
F[x]/J has a basis 1, a, a 2 , ... , a n ~ l as a vector space over F. Thus F[x]/J = F[a\. 
Furthermore 

m(a) = m(x + I) = m(x) + 1 = + 1 

since m(x) G /. So a is a root of the polynomial m(x) that we started with. 

To summarize, if F is a field and if m(x) is an irreducible polynomial in F[x], 
then we can construct a field extension K of F where \K : F\ — n, and where K 
contains an element a such that a is root of m(x) and such that K = F[a\. 

An important example is C = The minimal polynomial of i over H. 

is x 2 + 1. So C = R[x]/Id(x 2 + 1). In many ways this is a much better way 
of defining C than the usual way which is as the set of ordered pairs of real 
numbers with a rather twisted multiplication. Although the definition of the 
quotient ring ]R[x]/Jci(x 2 + 1) is somewhat sophisticated, it ultimately comes 
down to something very easy — take the set of polynomials in R[x], and then set 
x 2 + 1 = (equivalently set x 2 = —1). You need the sophistication to know that 
this really works, but you don't need the sophistication to apply it. 

6 Splitting fields 

Let F and K be fields, and let f(x) G F[x\. Then we say that /(x) splits in K 
if /(x) can be factorized into a product of linear factors 

/(x) = a(x — cci)(x — 0J2) . . . (x — a n ) 
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with cci, ai2, • • • , OL n G K, for some constant a G F. (Usually we only consider 
monic polynomials, and then a — 1.) The splitting field for f(x) over F in K 
is then 0:2, . . . , cx n ]. (Note that this is an algebraic extension of F since 

aii, a 2 , ■ ■ ■ ,a n are all roots of the polynomial f(x).) We say that K is a splitting 
field for /(x) if K = F[a±, a 2 , ■ ■ ■ , cn n ]. In other words if is a splitting field for 
f(x) over F if f(x) splits into a product of linear factors over K, and if K is 
generated over F by the roots of f(x). We will show that for every field F and 
for every polynomial f(x) G F[x] we can construct a splitting field for f(x) over 
F. It turns out that any two such splitting fields are isomorphic (though the 
details of the proof of this are outside the "Introduction to Fields" syllabus), and 
so we often refer to "the splitting field" , rather than to "a splitting field" . 
For example C is the splitting field for x 2 + 1 over R. 

The fundamental theorem of algebra states that any polynomial in C[x] splits 
over C. So if (for example) f(x) G Q[x], and we want to find the splitting field 
for f(x) over Q, then we can find the roots of f(x) in C, and the splitting field 
is the subfield of C generated over Q by the roots. For example consider the 
polynomial x 3 — 2 G Q[x]. This is irreducible over Q by Eisenstein's criterion, 
but over C 

x 3 _ 2 = {x _ 2 l/3 )(a . _ u2 VZ ){x _ w 2 2 l/ 3) 

where u = e 2m ^ 3 . So the splitting field is 

Qp 1 / 3 ,^ 1 / 3 ,^ 1 / 3 ]. 

This field is usually written as Q[2 1 / 3 , a;] since any field which contains 2 1 / 3 , CJ2 1 / 3 
and lu 2 2 1 ^ 3 also contains 2 1//3 and uj, and vice-versa. We can work out the degree 
of the splitting field over Q as follows. We have 

Q < Q[2 1/3 ] < Q[2 1/3 ,cj]. 

The minimal polynomial of 2 1 / 3 over Q is a; 3 — 2 (since this is irreducible by 
Eisenstein's criterion). So |Q'[2 1 / 3 ] : Q| = 3. The minimal polynomial of u over Q 
is x 2 + x + 1, but to compute |(Q[2 1//3 , a;] : <Q [2 1//3 ] | we need to know the minimal 
polynomial of uj over QJ2 1 / 3 ], which might conceivably be of lower degree. In 
general this is quite a tricky issue, but in this case it is straightforward. We 
know that uo G' Q^ 1 / 3 ] since u is complex and Q[2 1 / 3 ] is real. So the minimal 
polynomial of uj over Q[2 1 / 3 ] must be of degree at least 2. But the minimal 
polynomial divides x 2 + x + 1 so it is of degree at most 2. Hence the degree is 
exactly 2, and (Qp 1 / 3 ,^] : Q[2 X / 3 ]| = 2. By the Tower Lemma IQp 1 / 3 , cj] : Q| = 6. 
In addition the proof of the Tower Lemma gives us a basis for Q[2 1 / 3 , a;] over Q. 
We know that Q[2 X / 3 ] has basis 1,2^ 3 ,2 2 ^ over Q, and we know that Qp 1 / 3 ,^] 
has basis l,u over Q[2^ 3 ]. So Qp 1 / 3 ,^] has basis 1, 2 1 / 3 , 2 2 / 3 , u, u2^ 3 , u2 2 / 3 
over Q. 

Theorem 15 Let F be a field and let f(x) G F[x] be a polynomial of degree n. 
Then we can construct a splitting field K for f(x) over F , and \K : F\ < n\. 
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PROOF: The proof is by induction on n, and relies heavily on the fact that 
if m(x) G F[x] is a irreducible then we can construct an extension field of F in 
which m(x) has a root. 

The case n — 1 is trivial since if f(x) has degree 1 then f(x) splits in F and 
we can take K = F. So we suppose that the result is true for polynomials of 
degree less than n, and we let f(x) G F[x] have degree n. 

Let m(x) G F[x] be an irreducible factor of f(x), and let F 1 = F[x]/Id(m(x)). 
Then, as we showed above, F\ = F[a] for some a such that m(a) = 0. Furthermore 
\F 1 : F\ = degm < n. Since m(x)\f(x) it follows that f(a) = 0, and so 

f(x) = (x- a)g(x) 

for some g(x) G Fi[x] of degree n — 1. By induction we can construct a splitting 
field if for g(x) over i*i with |if : Fi\ < (n — 1)!. Then if is a splitting field for 
f(x) over F and 

\K : F\ = \K : F ± \ ■ |F X : F| < (n - l)!.n = n\. 

□ 

With a little more care we can do slightly better than this. 

Theorem 16 Let F be a field and let f(x) G F[x] be a polynomial of degree n. 
Then we can construct a splitting field K for f(x) over F , and \K : F\ divides 
n\. 

PROOF: As above we proceed by induction on n. If f(x) is irreducible we let 
Fx = F[x]/Id(f(x)). As above, Fi = F[a] for some a such that f(a) = 0. But 
now |Fi : F| = degf = n. As above 

f(x) = (x- a)g(x) 

for some g(x) G F\[x\ of degree n — 1. By induction we can construct a splitting 
field K for g{x) over F 1 with \K : Fi\ dividing (n — 1)!. Then if is a splitting 
field for f(x) over F and 

|if : F\ = |if : Fi| • |F : F| which divides n\. 

But what do we do when f(x) is not irreducible? Let f(x) = g(x)h(x) where 
g(x),h(x) G F[x] have degrees r, s respectively (with r, s > 1). Let L be a 
splitting field for g(:r) over F, and let if be splitting field for h(x) over L. Then 
by induction |L : F| divides r!, and |if : L\ divides s\. Clearly if is a splitting 
field for f(x) over F, and \K : F\ — \K : L\ ■ \L : F\, which divides r\.s\. Now 
for the cunning bit! We have r + s = degf = n and the binomial coefficient 
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n C r = n\/(r\.s\) is an integer. So r\.s\ divides n!, and we are done. □ 

In general it is quite hard to actually compute splitting fields in practice. But 
there is one particular special case which is quite straightforward, and often comes 
up in Finals. (It often comes up precisely because it is straightforward.) This 
special case is computing the splitting field of a polynomial of the form x n — 1 over 
Q. We know that the roots of this polynomial in C are 1, (, ( 2 , . . . , C™ -1 where 
£ =e 2nt / n . So the splitting field is Q[C]- And for any given n it is quite easy to 
factorize x n — 1 and find the minimal polynomial of ( over Q. For example take 
n= 12. 

z 12 - 1 = {x - l)(x + l)(x 2 + x + l)(x 2 - x + l)(x 2 + l)(x 4 -x 2 + 1). 

The different powers of ( are roots of the different factors: 1 is a root of x — 1, C 6 
is a root of x + 1, ( 4 and ( 8 are cube roots of unity so they are roots of x 2 + x + 1, 
( 2 and ( 10 are sixth roots of unity so they are roots of x 2 — x + 1, C 3 an d C 9 are 
fourth roots of unity and are roots of x 2 + 1. This leaves the four primitive 12-th 
roots of unity (, ( 5 , ( 7 and C 11 and these must all be roots of x 4 — x 2 + 1. (We 
call them primitive 12-th roots since they are not roots of x n — 1 for any n < 12, 
whereas all the other roots of x 12 — 1 are roots of x n — 1 for some n < 12.) Thus 
the minimal polynomial of ( over Q has degree 4 and the splitting field Q[Q has 
degree 4 over Q. 

The primitive n-th roots of unity are the numbers e 2km / n where 1 < k < n and 
where k is relatively prime to n. (If gcd(/c,n) = d > 1, and if we write k = rd, 
n = md, then e 2km / n =e ?rm/m j s an m _th root of unity.) So the number of 

primitive n-th roots of unity is y?(n) = \{k \ 1 < k < n, gcd(k,n) = It turns 
out that all the primitive n-th roots have the same minimal polynomial, which 
thus always has degree y?(n). However this is quite tricky to prove and both the 
proof and the result are outside the syllabus. Nevertheless it is useful to know 
the answer before you start. It is easy to see that f(12) = 4 and so in factorizing 
x 12 — 1 you look for an irreducible factor of degree 4. 

Let us look at one further example: x 9 — 1. If we let £ =e 2 W9 then the 
primitive 9-th roots of unity are ( k for k = 1,2,4,5,7,8. So we expect the 
minimal polynomial of ( to have degree 6. Now start factorizing x 9 — 1. 

x 9 - 1 = (x 3 - l)(x 6 + x 3 + 1) = (x - l)(x 2 + x + l)(x 6 + x 3 + 1). 

Since </?(9) = 6 we "expect" x 6 + x 3 + 1 to be irreducible. And of course it is 
irreducible, though you still have to prove that it is. The point is that you won't 
waste any time trying to factorize it. 
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7 Finite fields 



Let F be a finite field. As we showed above, every field contains a subfield 
isomorphic to Q or a subfield isomorphic to Z p for some prime p. Since F is finite 
it must have a subfield isomorphic to Z p . So F has finite characteristic p, and F 
is an extension field of Z p . Since F is finite it has a finite spanning set as a vector 
space over Z p and so it is finite dimensional over Z p . Let |F : Z p | = n. If we pick 
a basis i> i, v 2, . . . , v n for F as a vector space over Z p then every element of F can 
be expressed uniquely in the form a±Vi + a 2 v 2 + . . . + a n v n with ctj G Z p . There 
are p choices for each coefficient ctj and so F has p n elements. To summarize, if 
F is a finite field then |F| = p n for some prime p and some integer n > 1, and F 
has characteristic p and is an extension field of Z p . 

The non-zero elements of F form a group under multiplication (this is true 
in any field), and the order of this group is p n — 1. By Lagrange's Theorem, if 
a G F\{0} then a pn ~ x = 1. So a p " = a. Clearly P ™ = and so every element of 
F is a root of the polynomial x p " — x. Now a polynomial of degree p n can have 
at most p n roots, and we have just shown that all p n elements of F are roots of 
x pU — x. So x p " — x splits in F, and F is the splitting field for x p " — x over Z p . 

We can turn this analysis around to construct fields of order p n for all p and 
n. Let F be the splitting field for x p " — x over Z p . So 

x pU — x = (x — ai)(x — a 2 ) ■ ■ ■ (x — a p n) 

for G F, and F is generated by these roots over Z p . 

The first thing to note is that these roots are all distinct. If a polynomial has 
a repeated root then it has a factor in common with its formal derivative. But 
the formal derivative of x pn — x is p n x p "~ 1 — 1 which as no roots in F since F has 
characteristic p so that p n a pn ~ x — 1 = —1 for all a E F. So x pn — x has no roots 
in common with its formal derivative, and so has no repeated roots. 

The next thing to note is that the set of roots form a subfield of F containing 
Z p . If a G Z p then a p = a (using Lagrange's Theorem as above). So 

a p " = (... ((a p ) p ) ...) p = a, 

and a is a root. And if a, b are roots then (a + b) pU = of 1 + If" = a + b (since 
all the binomial coefficients of the cross terms are divisible by p). So a + b is a 
root. Similarly —a, ab, and a -1 (if a ^ 0) are roots. So the set {ai,a 2 , ■ ■ ■ ,a p «} 
of roots contains Z p and is closed under +, — , x, and -r. This implies that the 
set of roots is the splitting field F. And since there are p n roots |F| = p n . 

Thus we have shown that every finite field has order p n for some p and n, and 
we have shown that there is a unique finite field of order p n for every p and every 
n. (The uniqueness comes from the uniqueness of the splitting field.) 

For example the field GF(4) of four elements is the splitting field of x A — x 
over Z 2 . Now 

x 4 — x = x(x — l)(x 2 + x + 1) 
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and if we let uj be a root of x 2 + x + 1 in GF{4) then GF(4) = {0, 1,uj, uj 2 }. The 
multiplication table of GF{A) follows trivially from the fact that uj 3 = 1. And if 
we use the fact that 1 + uj + uj 2 = 0, and use the fact that GF(4) has characteristic 
2 (so that a + a = for all a G GF(4)), then the addition table is also easy to 
compute: 

1 + UJ = UJ + 1 = uj 2 , 
1 + uj 2 = uj 2 + 1 = UJ, 
UJ + uj 2 = uj 2 + UJ — 1. 



7.1 Subfields 

Consider the case when F is a finite field, and if is a subfield of F. Clearly K 
must have the same characteristic as F and so we have 

Z p < K < F 

for some prime p. And we must have \F\ = p n , \K\ = p m for some m,n. If 
\F : K\ — k then |F| = \K\ k and so p n = p mk and m|n. So we have shown that if 
K is a subfield of the finite field F where \F\ = p n then \K\ — p m for some m\n. 
The converse is also true. If F is a field of order p n and if m divides n then F 
has a unique subfield of order p m . To see this let F be a finite field of order p n , 
let m|n, and let L be the splitting field of the polynomial x pm — x over F . Let a 
be any root of x pm — x in L. Then a p ™ = a which implies that 

a? 2m = (a? m r m =a pm = a, 

„3m , r .2m x „m 

a p = (cr ) p = a p = a, 

and so on. So a is a root of x pkm — x for all k and since m\n we see that a is a 
root of a; p ™ — x. But F is the splitting field for the polynomial x p ™ — x over Z p 
and so every root of x pn — x in L must lie in F. So L is generated over F by 
roots of x pm — x, and all these roots lie in F. So L = F, and x pm — x must split 
in F. The roots of x pm — x in F form a field K of order p m . 

7.2 The multiplicative group of a finite field 

If F is any field then the non-zero elements of F form a group under multipli- 
cation. If F is a finite field then it turns out that this multiplicative group is 
cyclic. 

Let F be a finite field of order p n , and let F* be the multiplicative group of 
non-zero elements in F. Then |F*| = p n — 1, and by Lagrange's Theorem the 
(multiplicative) order of every element in F* divides p n — 1. To show that F* is a 
cyclic group we need to show that F* has an element of order exactly p n — 1. The 
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key to establishing this is to note that for any positive integer m there can be at 
most m elements in F* of order dividing m. This is because if a G F* has order 
dividing m then a is a root of the polynomial x m — 1, and a polynomial of degree 
m can have at most m roots in the field F. But we can say something stronger 
about the number of elements of order exactly m. One possibility (clearly) is 
that there are no elements in F* of order m. [For example, this must be the case 
if m does not divide p n — 1.] But consider the case when F* does have an element 
a of order m. Then there are m distinct powers 

l,a,a 2 ,...,a m_1 G F*, 

and all these elements have order dividing m. So there are at least m elements in 
F* of order dividing m. But by the remarks above we know that there are at most 
m elements in F* of order dividing m. This means that there are exactly m ele- 
ments in F* of order dividing m, and that these are the elements 1, a, a 2 , ... , a m ~ l . 
So if b G F* has order m then b = a k for some k with < k < m. Next, note 
that if gcd(/c,m) = d then a k has order m/d, so that a k has order m if and only 
if gcd(k,m) = 1. We define <p(m) = \{k \ < k < m, gcd(k,m) = 1}|, so that the 
number of elements in F* of order exactly m is (p(m). Putting all this together, 
we see that if m is any positive integer then the number of elements in F* of 
order exactly m is either or (p(m). Since the number of elements of order m is 
certainly if m does not divide p n — 1 we see that 

p n -l = |F*|< ¥>M 

m\(p n -l) 

with equality only possible if F* has elements of order m for every m\{p n — 1). 
However, if G is the cyclic group of order p n — 1 then G has exactly (p(m) elements 
of order m for every m dividing p n — 1 and so 

p»-l = |G|= 

m|(p n -l) 

So we must have equality in the equation 

\F*\< J2 <^ m )' 

m|(p"-l) 

and F* has elements of order m for every m|(p n — 1). In particular, F* has 
elements of order p n — 1 and F* is cyclic. 

The usual proof that the multiplicative group of a finite field is cyclic given in 
the literature uses the Fundamental Theorem of Abelian groups, which (among 
other things) states that every finitely generated abelian group is a direct sum of 
cyclic subgroups. Here, we have given a proof which does not use the Fundamental 
Theorem. 
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